You can clone the Platform Manager role and unselect all tasks except Impersonate. We have a "User Impersonation" role for that purpose. The only catch is that you have to go in every so often to make sure new features didn't get added to the Platform Manager role - which automatically get enabled for all cloned roles as well.
You can clone the Platform Manager role and unselect all tasks except Impersonate. We have a "User Impersonation" role for that purpose. The only catch is that you have to go in every so often to make sure new features didn't get added to the Platform Manager role - which automatically get enabled for all cloned roles as well.